MAKEMSI quickly and reliably creates MSI files in a non-programmatic way\Tips and TricksToolsSecurity Related Toolsregperm.exe

---

regperm.exe

A tool with source code by "Jeremy Parker" available at "http://homepages.cae.wisc.edu/~micro/regperm/".

regperm.EXE /?

Sets the permissions on registry keys in WinNT/2000

REGPERM [\\COMPNAME] /K REGKEY /A:<User>:<Permissions> /D:<User>:<Permissions>
 /R /I /F /S /E /C /Q /?

 Arguments

  \\COMPNAME  :  Name of remote machine to set permissions on
  /K REGKEY   :  Name of Key to apply permissions. If connecting to remote
                 machine, then only HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER
                 and their subkeys can be specified. If there is a space in
                 the name of the key, then it must be enclosed in double
                 quotes.
  /S          :  Replaces DACL for registry key with that specified (Default)
  /E          :  Edits the DACL for resigistry key
  /A:<X>:<Y>  :  Allow access for user/group X with permissions Y
  /D:<X>:<Y>  :  Deny access for user/group X with permissions Y
  /R          :  Explicitly set DACLs on all child subkeys
  /I          :  Turn on Inheritance for this key.
  /F          :  Force subkeys to Inherit
  /C          :  Continue on through recoverable errors
  /Q          :  Quiet mode, don't display output messages
  /?          :  Displays help message
  /info       :  Displays Regperm version information

 Permissions

  Q - Query value             L - create Link
  W - Write value             D - Delete
  C - Create subkey           S - read Security info
  E - Enumerate subkeys       A - write DACL
  N - Notify changes          O - write Owner
  R - Read (same as QENS)     F - Full access (same as QWCENLDSAO)

 Remarks

  When specifying a user or group for permissions, this program assumes
  a single-word user/group name. If there are spaces in the name, then you
  must enclose the name with double-quotes. Group names such as:
  Administrators, Everyone, Power Users, etc... are valid although it is
  possible in WinNT to create a local user account with the name matching
  that of an existing group. In this case, the user account masks the group
  account, leading to possibly undesired results.

  Command line parameters specified later take precedence over those specified
  earlier.

Please email me any feedback, additional information or corrections. See this page online (look for updates) MAKEMSI© is (C)opyright Dennis Bareis 2003-2008 (All rights reserved). Thursday August 28 2008 at 11:28am Visit MAKEMSI's Home Page